First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-45832

HighCVSS 8.8/10Last modified Oct 26, 2026

Description

All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization controls by using the V1 endpoints.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-639 CWE-551

Affected software

Vendor	Product	Versions
Chroma	ChromaDB	>= 0.5.0, <= *
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	—
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	—
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	—
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	—
Red Hat	Red Hat OpenShift AI (RHOAI)	—

References

Timeline

Published: Jun 12, 2026
Last modified: Oct 26, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-458338.8A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary c CVE-2026-458345.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() A CVE-2026-458355.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() CVE-2026-458365.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() A CVE-2026-458377.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on fork arena_vm_open() only CVE-2026-458385.5In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_n CVE-2026-458397.8In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() C CVE-2026-45843.1A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler CVE-2026-458405.5In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The CVE-2026-458415.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_CVE-2026-458425.5In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhc CVE-2026-458438.2In the Linux kernel, the following vulnerability has been resolved: slip: bound decode() reads against the compressed packet length slhc_u

CVE-2026-45832: High severity, CVSS 8.8 | Vulnix